Information Security Magazine

A quarter of victims of deepfake attacks have lost over $1m. CISOs worry that boardrooms don’t understand the threat

Ox Security found security shortcomings in analysis of over 15,000 MCP servers

Citrix has confirmed exploitation of two critical zero-day RCE bugs

The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration

The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases and voting machines

The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive banking credentials

EfficientIP says it flagged AliExpress phishing domains before they were registered

Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims

CISA has set out a new framework to improve CVE data quality as vulnerability volumes rise

Whitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its 2022 cyber strategy

Australian PM Anthony Albanese criticized OpenAI’s response to the incident, which occurred in June 2026

ShareGate study claims to reveal a governance ‘crisis’ as AI usage grows

SANS Institute report claims data rather than skills is now the main hurdle for threat hunters

GitGuardian finds 474 leaked GitHub App keys still authenticating, including keys with admin access

Qrator found a Windows botnet advertised with AI API draining, credential theft and SOCKS5 proxying

A total of 1073 firms fell victim to ransomware attacks globally in August, with the industrial sector the most affected, according to new NCC data

Infamous threat group ShinyHunters claims to have personal information on thousands of FBI employees

The EU Court of Auditors has criticized EU shortcomings in responding to major cyber incidents

WaterPlum compromised 30,000 devices and took funds or credentials from 7000 crypto wallets

A new report by ISACA found that 71% of orgs have not run AI incident response exercises as teams face rising pressure